Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: 5wZDMV1FT1dHUtG8aiyzgTzFUfqB/iYmKTTd1Tt73Gg=
Subject key identifier: 91:8C:EA:04:20:D2:DB:8D:BA:51:E2:7D:77:16:D8:1B:63:EE:B7:8F
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 0194BD8543CD147283140152B9A2AF17D46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0B65
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: FcTWj4ctYHjTKWS6CNsPwqSDRruGrYp3N8StxNY1Hd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:43:cd:14:72:83:14:01:52:b9:a2:af:17:d4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=918cea0420d2db8dba51e27d7716d81b63eeb78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:74:7b:e8:7f:cd:4a:fd:53:41:52:84:52:
58:4c:cf:0a:35:43:4f:dd:2b:46:a3:37:4b:b0:36:
e1:e3:5f:5c:f1:40:fb:62:91:d4:c7:f7:f7:0d:b2:
61:24:5f:06:2e:ef:bb:7e:c8:2c:df:5f:d7:f5:45:
c9:7a:70:d4:77:39:2e:a2:8a:f3:ac:60:6f:ee:eb:
0f:26:22:43:f7:a7:c7:bb:7d:8b:1d:2e:ab:37:7c:
e2:bb:68:ba:0f:c4:a1:c8:4e:9f:a7:c3:12:a5:20:
66:35:18:52:4c:67:11:e8:d5:1f:9f:70:f5:8b:e9:
ec:37:4a:9c:cf:1a:9a:20:67:b7:72:97:19:a8:08:
0f:a3:c8:41:c3:5f:d3:e7:6e:3a:dd:1c:ce:da:5e:
e5:71:88:59:90:e2:75:ce:4d:d3:d4:2f:7d:24:fd:
99:40:df:94:13:6c:ab:e8:75:0e:4d:38:9f:7a:24:
e9:f6:70:4d:ae:42:9a:0a:93:6c:93:67:e0:d5:85:
f6:97:46:a7:ed:16:17:a7:5b:87:de:ca:ac:24:13:
02:15:18:bd:98:99:b7:c1:2f:02:f3:ab:d9:18:14:
cf:fe:67:a7:ea:da:8a:dd:c4:6c:90:be:49:65:6c:
1e:b1:bd:fd:43:50:88:2f:97:19:40:11:48:3b:5d:
66:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8C:EA:04:20:D2:DB:8D:BA:51:E2:7D:77:16:D8:1B:63:EE:B7:8F
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8f:ab:8e:89:bb:c3:ee:53:a6:da:7e:34:46:c1:e6:d5:b1:
8e:14:33:3c:aa:28:82:82:a2:00:ab:14:5c:33:bb:ad:a6:e6:
72:62:7d:1a:bf:e3:72:5a:7f:89:b9:57:a3:06:dd:3f:2f:41:
c5:ea:d4:5c:b9:49:e0:1b:6b:9d:b2:2c:34:18:38:12:66:29:
10:cb:6a:95:32:84:65:b9:e5:32:99:89:1c:a3:02:50:4a:f4:
01:b4:19:96:2f:c1:82:86:bb:e8:42:69:7a:2c:88:fd:27:4e:
9e:b0:d1:7c:1d:f7:3d:ea:9a:d5:07:83:39:32:f7:aa:90:ce:
70:64:3c:70:d9:50:71:47:23:ce:78:55:86:8b:6c:f7:dc:13:
7c:41:11:ba:32:5f:fd:47:f9:6c:dd:07:64:3d:51:7b:3e:17:
eb:f0:4f:d9:e4:ea:06:82:b6:56:e0:43:32:8a:ef:1a:90:1f:
f6:8d:45:e9:90:6a:ed:4e:51:32:b8:fc:46:f9:c9:59:a5:b7:
69:f8:2c:34:6e:b9:de:cd:df:28:a7:f0:26:c1:e6:84:5e:81:
7b:ea:8c:11:53:b5:c4:41:a2:55:e6:d5:ee:1a:f9:35:4e:b2:
57:b9:88:bf:ee:00:53:55:d4:a1:3e:29:b9:27:12:62:b9:c0:
a2:fd:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:53 2025 by rpki-client